Cisco aNCE Program: Assessment Center

-
It’s been two weeks since my last post about the aNCE program and I am back with more news and information about the next stage, the assessment center.
Upon successful completion of the previous interview (Stage 2) you will be invited to take part in an Assessment day, this is held at the location of the job post you have applied for.
The Assessment Center is the final stage before being offered the aNCE position so its worth making sure you are well prepared before attending the assessment day. The recruitment team will provide you with all the relevant information to ensure the best chance of success before the big day, just ensure you are well prepared.
The assessment center blueprint could change at a moments notice, but the following information I have provided is based on what I prepared for.
  1. Logical test
  2. Technical presentation
  3. Managers interview 
  4. Group role play 
  5. Individual role play


Logical test

This is to assess each candidates problem solving skills. Mine was approximately 10 questions and was completed within 15 minutes. The logical test is done on paper and once completed it is passed to the assessors.
This stage is pretty self-explanatory, I am no stranger to these types of tests so I approached this one as I have done any previous test.
 
 

Technical presentation

You will be expected to give a presentation on a specific technology without using presentation software. Cisco will provide you with a list of technologies you are allowed to talk about prior to the assessment center. You are only required to pick one technology from the list and you must be prepared to talk about the technology for approximately 15 minutes. When you have delivered your presentation you must be prepared to answer any questions the assessors may have.
As mentioned above, Cisco provided me with a list of technologies I could choose from and it was my job to present one on the day. Even though I was fairly confident with the technical topic I had selected, I spent a good few days revising in order to make sure I was 100% confident.
The documentation received prior to the assessment center also pointed out that it was forbidden to use powerpoint software however visual aids such as a white-board or flip chart was permitted. When I carried out my presentation I used the white-board to further explain my topic and I feel that this worked very well. My presentation lasted about 15 minutes and then I was asked some technical questions by the assessor to further test my knowledge.
At the end of my technical presentation I received some good feedback and I was also asked how I felt I performed. I was confident in what I was presenting and although I was slightly nervous I managed to keep it together and deliver a good presentation.
 
 

Managers interview

You will have the opportunity to meet your potential future manager at the assessment day. This is a good chance to express why you are the perfect fit for the role and you should also have some time to discuss any questions and concerns you may have.
I was excited to sit down and talk to the manager about my motivations for the role and to find out more about Cisco. This interview wasn’t technical, it was slightly more personal and the manager wanted to understand more about what made me apply for the role and why I would be a good fit for the role. I really enjoyed speaking to the manager who was a really nice person and very laid back.
 
 

Group role play

So that the assessors can see how you work within a team you will be expected to take part in a role play activity. You will be given a scenario and you may find yourself challenged by the objectives and the time set but this is normal and it gives the assessors a chance to see how well every individual reacts under pressure.
Coming from the job I had just previously come from I knew that this was something I wouldn’t struggle with. I tend to see myself as a good team player and I believe I demonstrated this on the day. The role play lasted approximately 45 minutes and I played the role of the NCE. The assessors played the role of the client and myself and the other NCE’s had to notify them of a vulnerability in they’re network and suggest possible solutions to the assessors (clients). The clients were difficult to deal with and challenged us with some difficult questions however we worked as a team to find suitable answers based on the information we were given.
The group role play wasn’t the easiest I’ve done, not because of the other candidates but because of the lack of information we had and time to come up with potential solutions. At the end of this exercise we discussed what we think went well along with the things we felt we could have done better. So although challenging, I feel like I did a good job at this task.
 
 

Individual role play

You will play the role of a NCE and the assessors will play the role of the customer. You will be given a scenario and asked to provide technical solutions along with justifications to your answers. The assessors will then ask you to troubleshoot a made up scenario so that they can see how you approach troubleshooting.
At first I was rather nervous entering the room and this was because I had two assessors for this exercise. My nerves soon calmed  and we had a general chat before starting the exercise. In this exercise I was presented with a customer topology and asked to make recommendations on the technologies that should be used. I was asked to justify why I would use particular technologies and I was asked about any potential implications of using them.
I believe this section was put in place to see what I understood about networking and technologies as I was asked about my background and certifications before the exercise started. I completed this exercise and was then given another scenario which was focused more on troubleshooting. The troubleshooting exercise took around 15 minutes and I was able to solve the issue with a few prompts from the assessors.
At the end of this exercise the assessors give me good feedback and asked me how I felt the exercise went. I told the assessors that I felt the exercise went well and they agreed. I didn’t try to talk about the technologies I didn’t know enough about and I made this clear to the assessors, other than digging a ditch for myself.
 
 
Having completed all the above exercises at the assessment day I can confirm that I have been successful and I have since been offered the aNCE position starting early 2017. This is like a dream come true for me and I am looking forward to starting my career with Cisco.
I will soon start the aNCE role by spending the first 6 months in Krakow training and I will continue to share my experiences with my blog followers.
I would like to hear from anyone who has applied for the aNCE program starting in 2017 and from the previous cohort that have completed the 6 months training in Poland, Krakow. It would be nice if you could also share your experiences below đŸ™‚
#Cisco #CiscoProgram #ANCE #aNCEAssessmentCenter #aPM #CiscoaNCE2017 #CiscoAssessmentCenter2017 #CiscoANCEProgram #CiscoaPM
 
Kelvin Charles - Network and Cyber Security Professional.

Popular Posts

Capturing EAPOL and RADIUS Using Wireshark

-
Image
In this article we are going to take a look at how to capture Extensible Authentication Protocol Over LAN (EAPOL) and Remote Authentication Dial-In User Service (RADIUS) packets using Wireshark. This article can be useful for troubleshooting 802.1x within your environment and can also be used for learning purposes. The following topology has been used to gather the required output for this article. Note: This article will only cover the switch configurations that are required to gather EAPOL and RADIUS configuration. Overview of the Topology The supplicant is configured to perform 802.1x using EAP-TLS as the authentication method The user certificate on the supplicant will be used for authentication The supplicant has Wireshark installed Cisco ISE is used for authentication and authorisation The supplicant is assigned to VLAN 10 upon authentication and all other endpoint ports are assigned to VLAN 99 Sniffer device is running Wireshark in order to capture RADIUS flows via SPAN 802.1x
Read more

Configuring Cisco Smart License Software

-
In this article, I would like to demonstrate how to configure Cisco Smart Licensing on the virtual Cisco Adaptive Security Appliance (ASAv). This post assumes that readers already have access to there own Smart Account and would like to know the process of applying licenses. Step 1: Generate ID Token Sign into your Cisco Software Portal: software.cisco.com and navigate to “Smart Software Licensing” You will now need to create an ID token for your device, this is required for communication between the device and the licensing authority. Follow the steps below to create a new token. Click Inventory >>> General >>> New Token and select your preferred options and enter a description for your token. Once you are happy with your token settings click Create Token . You should now have a token created which can be copied over to the device you wish to license. All commands and output from this point will be related to the ASA so please seek out further advice if you wish
Read more

Cisco :: FXOS Authentication Using TACACS

-
In this article, I will describe how to enable authentication and authorization for Firepower eXtensible Operating System (FXOS) devices. The use case presented in this document illustrates how Cisco Identity Services Engine (ISE) can be utilised with attribute-value pairs (AV-Pairs) to authenticate and authorize users accessing the Firepower Chassis Manager (FCM) or FXOS platforms via TACACS+. At the time of writing this post, I found that limited documentation existed and of that documentation that did exist, the examples given weren’t as straightforward. In an effort to make this process easier for my colleagues and customers to understand I have put together the following instructions based on a previous use case given to me. Extracts of this document have been taken from a wider document I am currently creating. I will update this article with the complete document when it has been finalized. Requirements A ‘Device Administration’ license is required in order to use TACACS+ with
Read more

Configuring Remote Access VPN on Firepower

-
Image
In this article we are going to take a look at how to configure remote access VPN's on Firepower devices. This demonstration is based on the following lab environment: Cisco Virtual Firepower Management Center Cisco Virtual Firepower Threat Defense Cisco ISE 2.6 Windows host with AnyConnect VPN Windows Server 2019 (CA Server) All Firepower devices are running version 6.5 Note: ISE is used for authentication and authorization in the following lab however the configuration elements of ISE are out of scope for this demonstration. Generate a CSR for Remote Access VPN's Those accessing your network remotely need to trust the service you're running. Without the correct trust users could face issues connecting via VPN. With access to the FMC navigate to Objects > Object Management > PKI > Cert Enrollment Assuming you are opting for manual enrollment, select 'Manual' in Enrollment Type and copy the CA Certificate BASE-64 into the field. Now select the 'Certifi
Read more

Kali Linux :: CAM Table Overflow Attack Demonstration

-
Image
As part of my on-going studying for the CCNA Security 210 – 260 certification I have been exploring different types of network attacks, one of which is CAM table overflow attacks. In this article I would like to share what I have learnt and provide a demonstration of the attack carried out in a lab environment. To understand my demonstration, you first need to understand how a CAM table overflow attack works and what happens as a result of the attack.   Switches build Content Addressable Memory (CAM) tables based on mac-addresses and port numbers. When a switch receives a frame it checks the table to see if the source mac-address is already known, if the source mac-address is unknown the switch will add the mac-address to the table along with the port number. The switch then checks the destination layer two frame and if no entry exists the switch broadcasts the frame out of all ports except the port in which the frame was received. Presuming the destination mac-address wants to respond
Read more